Lucene search
+L

8860 matches found

Cvelist
Cvelist
added 2026/04/01 8:36 a.m.52 views

CVE-2026-23401 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE When installing an emulated MMIO SPTE, do so after dropping/zapping the existing SPTE if it's shadow-present. While commit a54aa15c6bda3 was right about...

0.00184EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/04/01 12:0 a.m.11 views

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50170)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50170 advisory. 6.12.0-200.74.27.1 - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE Sean Christopherson Orabug: 39071315 Tenable has extract...

8.1CVSS5.8AI score0.00184EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/30 12:0 a.m.12 views

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-1494)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1494 advisory. In the Linux kernel, the following vulnerability has been resolved: pagepool: Fix use-after-free in pagepoolrecycleinring CVE-2025-38129 In the Linux kernel, the following vulnerability has be...

9.8CVSS6.5AI score0.00601EPSS
SaveExploits0References136
Amazon
Amazon
added 2026/03/27 12:0 a.m.18 views

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: pagepool: Fix use-after-free in pagepoolrecycleinring CVE-2025-38129 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix a null-ptr access in the cursor snooper CVE-2025-40110 In th...

7.8CVSS6.6AI score0.00601EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/03/26 3:19 p.m.11 views

CVE-2025-36920

In hypalloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6AI score0.00087EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:2 p.m.8 views

CVE-2026-32290

The GL-iNet Comet GL-RM1 KVM before version 1.8.2 does not sufficiently verify the authenticity of uploaded firmware files. An attacker-in-the-middle or a compromised update server could modify the firmware and the corresponding MD5 hash to pass verification...

7CVSS6AI score0.0016EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:2 p.m.10 views

CVE-2026-32298

The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands...

9.1CVSS6.1AI score0.00647EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2026/03/26 12:0 a.m.13 views

Ubuntu: Security Advisory (USN-8098-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.8AI score0.00265EPSS
SaveExploits0References3
OSV
OSV
added 2026/03/25 8:48 a.m.6 views

SUSE-SU-2026:20931-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues. The following security issues were fixed: - CVE-2025-39753: gfs2: Set .migratefolio in gfs2rgrp,metaaops bsc1249590. - CVE-2025-39964: crypto: afalg - Disallow concurrent writes in afalgsendmsg bsc1251966. -...

9.8CVSS5.9AI score0.0071EPSS
SaveExploits7References377
Oracle linux
Oracle linux
added 2026/03/25 12:0 a.m.10 views

virt:ol and virt-devel:ol security update

hivex 1.3.18-23 - Limit recursion in ri-records CVE-2021-3622 resolves: rhbz1976194 libguestfs 1.44.0-9.0.2 - libguestfs.spec: Add btrfs-progs RPM to appliance Orabug: 35634755 libguestfs-winsupport 8.10-1 - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE-2022-40284 - resolves: rhbz2236373 libiscsi...

7.5CVSS5.8AI score0.04794EPSS
SaveExploits1
Rockylinux
Rockylinux
added 2026/03/24 12:1 p.m.10 views

virt:rhel and virt-devel:rhel security update

An update is available for seabios, swtpm, libguestfs-winsupport, module.libvirt, perl-Sys-Virt, module.supermin, module.libiscsi, module.libvirt-dbus, libvirt-dbus, module.swtpm, module.virt-v2v, qemu-kvm, module.sgabios, module.perl-Sys-Virt, libvirt-python, module.qemu-kvm,...

7.5CVSS7.1AI score0.00783EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/03/24 10:56 a.m.9 views

Moderate: Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update

An update for the virt:rhel and virt-devel:rhel module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

7.5CVSS7.1AI score0.00783EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/03/24 12:0 a.m.5 views

RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2026:5578)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:5578 advisory. Kernel-based Virtual Machine KVM offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains...

7.5CVSS7.2AI score0.00783EPSS
SaveExploits0References6
OSV
OSV
added 2026/03/24 12:0 a.m.10 views

ALSA-2026:5578 Moderate: virt:rhel and virt-devel:rhel security update

Kernel-based Virtual Machine KVM offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the...

7.5CVSS7.1AI score0.00783EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/03/24 12:0 a.m.8 views

RockyLinux 8 : virt:rhel and virt-devel:rhel (RLSA-2026:5578)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:5578 advisory. qemu-kvm: VNC WebSocket handshake use-after-free CVE-2025-11234 Tenable has extracted the preceding description block directly from the RockyLinux security...

7.5CVSS7.2AI score0.00783EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2026/03/23 12:0 a.m.8 views

Ubuntu: Security Advisory (USN-8112-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.8AI score0.00835EPSS
SaveExploits1References2
Circl
Circl
added 2026/03/18 5:4 p.m.11 views

CVE-2026-32291

creationtimestamp| type| source ---|---|--- 2026-03-18 17:04:14+00:00| seen| https://t.me/truesecator/8008...

7CVSS5.1AI score0.00332EPSS
SaveExploits0References1
Rockylinux
Rockylinux
added 2026/03/18 6:1 a.m.13 views

virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

An update is available for seabios, swtpm, perl-Sys-Virt, module.supermin, module.libiscsi, module.libvirt-dbus, libvirt-dbus, module.swtpm, module.virt-v2v, module.sgabios, module.perl-Sys-Virt, libvirt-python, module.libvirt-python, netcf, module.netcf, module.seabios, module.libguestfs, hivex,...

8.2CVSS6.7AI score0.0053EPSS
SaveExploits1
EUVD
EUVD
added 2026/03/17 6:30 p.m.9 views

EUVD-2026-12614

The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands...

9.1CVSS5.9AI score0.00647EPSS
SaveExploits0References4
NVD
NVD
added 2026/03/17 6:16 p.m.6 views

CVE-2026-32298

The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands...

9.1CVSS0.00647EPSS
SaveExploits0References3
Rows per page
Query Builder